@better-auth/passkey 1.6.16 → 1.6.17

package/dist/client.mjs

@@ -1,4 +1,4 @@
-import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-C8tCkiDB.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Dpvq05Wg.mjs";
 import { WebAuthnError, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 import { useAuthQuery } from "better-auth/client";
 import { atom } from "nanostores";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-C8tCkiDB.mjs";
+import { n as PASSKEY_ERROR_CODES, t as PACKAGE_VERSION } from "./version-Dpvq05Wg.mjs";
 import { mergeSchema } from "better-auth/db";
 import { createAuthEndpoint } from "@better-auth/core/api";
 import { APIError } from "@better-auth/core/error";
@@ -178,6 +178,7 @@ const generatePasskeyRegistrationOptions = (opts, { maxAgeInSeconds }) => {
 		await ctx.context.internalAdapter.createVerificationValue({
 			identifier: verificationToken,
 			value: JSON.stringify({
+				type: "registration",
 				expectedChallenge: options.challenge,
 				userData: {
 					id: user.id,
@@ -268,6 +269,7 @@ const generatePasskeyAuthenticationOptions = (opts, { maxAgeInSeconds }) => crea
 		})) } : {}
 	});
 	const data = {
+		type: "authentication",
 		expectedChallenge: options.challenge,
 		userData: { id: session?.user.id || "" }
 	};
@@ -315,7 +317,8 @@ const verifyPasskeyRegistration = (options) => {
 		if (!verificationToken) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
 		const data = await ctx.context.internalAdapter.consumeVerificationValue(verificationToken);
 		if (!data) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
-		const { expectedChallenge, userData, context } = JSON.parse(data.value);
+		const { type: ceremony, expectedChallenge, userData, context } = JSON.parse(data.value);
+		if (ceremony !== void 0 && ceremony !== "registration") throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
 		const session = requireSession ? ctx.context.session : await getSessionFromCtx(ctx);
 		if (session?.user?.id && userData.id !== session.user.id) throw APIError.from("UNAUTHORIZED", PASSKEY_ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY);
 		try {
@@ -351,6 +354,7 @@ const verifyPasskeyRegistration = (options) => {
 				}
 				if (!resolvedName) resolvedName = result?.name?.trim() || void 0;
 			}
+			if (!targetUserId) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.RESOLVED_USER_INVALID);
 			const pubKey = base64.encode(credential.publicKey);
 			const newPasskey = {
 				name: resolvedName,
@@ -406,7 +410,8 @@ const verifyPasskeyAuthentication = (options) => createAuthEndpoint("/passkey/ve
 	if (!verificationToken) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
 	const data = await ctx.context.internalAdapter.consumeVerificationValue(verificationToken);
 	if (!data) throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
-	const { expectedChallenge } = JSON.parse(data.value);
+	const { type: ceremony, expectedChallenge } = JSON.parse(data.value);
+	if (ceremony !== void 0 && ceremony !== "authentication") throw APIError.from("BAD_REQUEST", PASSKEY_ERROR_CODES.CHALLENGE_NOT_FOUND);
 	const passkey = await ctx.context.adapter.findOne({
 		model: "passkey",
 		where: [{

package/dist/{version-C8tCkiDB.mjs → version-Dpvq05Wg.mjs}

@@ -18,6 +18,6 @@ const PASSKEY_ERROR_CODES = defineErrorCodes({
 });
 //#endregion
 //#region src/version.ts
-const PACKAGE_VERSION = "1.6.16";
+const PACKAGE_VERSION = "1.6.17";
 //#endregion
 export { PASSKEY_ERROR_CODES as n, PACKAGE_VERSION as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@better-auth/passkey",
-  "version": "1.6.16",
+  "version": "1.6.17",
   "description": "Passkey plugin for Better Auth",
   "type": "module",
   "license": "MIT",
@@ -55,16 +55,16 @@
   },
   "devDependencies": {
     "tsdown": "0.21.1",
-    "@better-auth/core": "1.6.16",
-    "better-auth": "1.6.16"
+    "@better-auth/core": "1.6.17",
+    "better-auth": "1.6.17"
   },
   "peerDependencies": {
     "@better-auth/utils": "0.4.1",
-    "@better-fetch/fetch": "1.2.2",
+    "@better-fetch/fetch": "1.3.0",
     "better-call": "1.3.6",
     "nanostores": "^1.0.1",
-    "@better-auth/core": "^1.6.16",
-    "better-auth": "^1.6.16"
+    "@better-auth/core": "^1.6.17",
+    "better-auth": "^1.6.17"
   },
   "scripts": {
     "build": "tsdown",